mirror of
https://codeberg.org/guix/guix.git
synced 2025-10-02 02:15:12 +00:00
a57ed987ff
This makes it impossible to unmount or remount things from within
‘call-with-container’.
* gnu/build/linux-container.scm (initialize-user-namespace):
Add #:host-uid and #:host-gid. and honor them.
(run-container): Add #:lock-mounts?. Honor it by calling ‘unshare’
followed by ‘initialize-user-namespace’.
(call-with-container): Add #:lock-mounts? and pass it down.
(container-excursion): Get the user namespace owning the PID namespace
and join it, then join the remaining namespaces.
* tests/containers.scm ("call-with-container, mnt namespace, locked mounts"):
New test.
("container-excursion"): Pass #:lock-mounts? #f.
Change-Id: I13be982aef99e68a653d472f0e595c81cfcfa392
|
||
|---|---|---|
| .. | ||
| bootloader | ||
| build | ||
| home | ||
| installer | ||
| machine | ||
| packages | ||
| services | ||
| system | ||
| tests | ||
| artwork.scm | ||
| bootloader.scm | ||
| ci.scm | ||
| compression.scm | ||
| home.scm | ||
| image.scm | ||
| installer.scm | ||
| local.mk | ||
| machine.scm | ||
| packages.scm | ||
| services.scm | ||
| system.scm | ||
| tests.scm | ||